From f0a21b941b12989e607e92845f5f96a5494ab70e Mon Sep 17 00:00:00 2001 From: Philippe Antoine Date: Fri, 18 Jul 2025 15:35:41 +0200 Subject: [PATCH] snmp: add test when snmp is disabled Ticket: 7820 --- tests/snmp-disabled/README.md | 5 +++++ tests/snmp-disabled/suricata.yaml | 15 +++++++++++++++ tests/snmp-disabled/test.yaml | 11 +++++++++++ 3 files changed, 31 insertions(+) create mode 100644 tests/snmp-disabled/README.md create mode 100644 tests/snmp-disabled/suricata.yaml create mode 100644 tests/snmp-disabled/test.yaml diff --git a/tests/snmp-disabled/README.md b/tests/snmp-disabled/README.md new file mode 100644 index 000000000..73fca0fc2 --- /dev/null +++ b/tests/snmp-disabled/README.md @@ -0,0 +1,5 @@ +Test when snmp is disabled + +Pcap reused + +Ticket https://redmine.openinfosecfoundation.org/issues/7820 diff --git a/tests/snmp-disabled/suricata.yaml b/tests/snmp-disabled/suricata.yaml new file mode 100644 index 000000000..66e695af4 --- /dev/null +++ b/tests/snmp-disabled/suricata.yaml @@ -0,0 +1,15 @@ +%YAML 1.1 +--- + +outputs: + - eve-log: + enabled: yes + filetype: regular + filename: eve.json + types: + - flow + +app-layer: + protocols: + snmp: + enabled: no \ No newline at end of file diff --git a/tests/snmp-disabled/test.yaml b/tests/snmp-disabled/test.yaml new file mode 100644 index 000000000..348700cf4 --- /dev/null +++ b/tests/snmp-disabled/test.yaml @@ -0,0 +1,11 @@ +args: + - -k none + +pcap: ../snmp-v2c-get/SNMPv2c_get_requests.pcap + +checks: + - filter: + count: 0 + match: + event_type: flow + app_proto: snmp -- 2.47.3